Vulnerabilities > CVE-2006-2725 - SQL Injection vulnerability in eggBlog Posts.PHP
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL commands via the id parameter. The vendor has released version 3.0.7 of eggblog to address this issue.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | Eggblog < 3.07 Remote (SQL Injection / Privilege Escalation) Exploit. CVE-2006-2725. Webapps exploit for php platform |
id | EDB-ID:1842 |
last seen | 2016-01-31 |
modified | 2006-05-28 |
published | 2006-05-28 |
reporter | nukedx |
source | https://www.exploit-db.com/download/1842/ |
title | Eggblog < 3.07 - Remote SQL Injection / Privilege Escalation Exploit |
References
- http://secunia.com/advisories/20352
- http://www.nukedx.com/?getxpl=36
- http://www.nukedx.com/?viewdoc=36
- http://www.securityfocus.com/archive/1/435284/100/0/threaded
- http://www.securityfocus.com/archive/1/435300/100/0/threaded
- http://www.securityfocus.com/bid/18140
- http://www.vupen.com/english/advisories/2006/2030
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26832